Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/YeYDB1nFrg2y-Wbdm1FbuvmUxlk.roa
File: YeYDB1nFrg2y-Wbdm1FbuvmUxlk.roa (raw, json)
Hash identifier: 8ZjFs93iBYxIHf1tqjfbSd+v/OQpq7OLgy1PpN+0PIA=
Subject key identifier: 61:E6:03:07:59:C5:AE:0D:B2:F9:66:DD:9B:51:5B:BA:F9:94:C6:59
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 018570706DE837DFB6E0883F642C26CBDBD2
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/YeYDB1nFrg2y-Wbdm1FbuvmUxlk.roa
Signing time: Mon 02 Jan 2023 03:04:54 +0000
ROA not before: Mon 02 Jan 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8399
IP address blocks: 87.247.224.0/24 maxlen: 24
185.197.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:6d:e8:37:df:b6:e0:88:3f:64:2c:26:cb:db:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jan 2 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61e6030759c5ae0db2f966dd9b515bbaf994c659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:db:31:8c:2a:18:81:e6:84:ef:19:99:cc:
11:cb:ca:7f:51:ba:4e:d6:99:42:b3:79:c7:ed:65:
cc:5b:07:87:5a:90:c3:48:c7:7c:ec:df:2f:bf:d1:
96:97:7e:27:13:5d:1f:ae:fe:1d:51:2f:97:04:73:
f5:1e:16:89:44:87:fc:46:4b:36:85:fc:05:c8:89:
fe:cf:c4:cc:01:d0:18:9c:a3:5f:a4:73:24:0e:b8:
f8:2f:f3:67:31:7a:a9:cd:d8:1d:6d:26:d9:5e:e2:
c9:bd:9c:14:92:dc:5f:58:58:b7:c2:4d:87:7a:dc:
22:e6:d4:89:6f:d3:d2:e2:57:af:44:4d:71:c4:b6:
57:3c:60:0a:50:39:f7:b9:cd:18:99:49:ce:9c:50:
0c:a4:96:86:f7:02:0a:d9:56:54:14:1e:c2:f3:a2:
32:43:98:23:64:a5:d3:41:9a:0f:ad:f3:36:9b:10:
40:fc:e6:03:0f:ea:3f:12:4f:be:02:cd:28:d9:d0:
aa:e4:17:19:bf:91:c4:47:29:2f:b4:56:de:d3:6f:
3a:17:60:1a:39:77:2e:aa:5f:f5:ef:c5:32:d6:86:
af:ef:bb:ac:72:a5:a6:42:c6:c8:b1:92:da:6f:10:
1e:ee:6f:dc:ff:7e:a8:d1:79:01:db:26:04:1a:6a:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:03:07:59:C5:AE:0D:B2:F9:66:DD:9B:51:5B:BA:F9:94:C6:59
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/YeYDB1nFrg2y-Wbdm1FbuvmUxlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.224.0/24
185.197.100.0/24
Signature Algorithm: sha256WithRSAEncryption
55:95:e8:98:e4:1d:7f:0b:d9:b6:1e:f0:5b:7e:2e:7d:8a:96:
ae:44:7a:8c:1a:30:6c:47:b5:fe:12:9d:6b:90:f7:88:4b:46:
74:d5:38:e5:39:6c:09:93:3b:50:ab:f4:35:61:60:e2:b0:84:
fd:fb:8a:15:24:26:10:74:cb:87:5c:a2:b7:6c:eb:1a:27:70:
53:73:36:22:73:50:f9:59:bc:c5:1a:2e:cd:12:5e:c7:a4:e2:
31:8b:ea:65:59:b6:4e:0a:b4:1a:15:f6:19:55:b5:20:6a:74:
e9:e5:72:1c:7b:86:2c:2a:20:be:6e:1b:59:63:cb:7f:d5:71:
77:b0:a1:7d:8d:28:42:ae:8b:a9:28:f0:ee:92:54:6d:06:be:
ff:e5:eb:3a:5c:3b:02:58:28:25:99:b8:15:b9:5b:5e:2b:40:
50:33:63:fb:ec:b5:b6:3f:e1:ab:6a:f0:11:d7:0f:a5:b3:ec:
36:a2:bf:c1:22:b1:94:00:64:5c:72:a3:4c:a0:1d:b0:04:7b:
08:0a:ef:54:0f:0d:ee:96:48:e7:56:9e:31:c2:29:2b:6c:06:
25:35:4d:03:8e:a1:20:e0:15:1c:17:6e:e4:d5:fe:37:30:76:
7a:72:b9:0d:39:5d:50:7e:db:d6:65:ea:1b:dc:1a:9c:47:ea:
df:0a:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:23 2024 by rpki-client on console-ams.rpki-client.org